Ticket #21990: 21990-subclass.2.diff

new file wp-includes/class-simplepie-kses.php

@@ +1 @@
+<?php
+
+class WP_SimplePie_Sanitize_KSES extends SimplePie_Sanitize {
+        public function sanitize( $data, $type, $base = '' ) {
+                if ( $type & ( SIMPLEPIE_CONSTRUCT_HTML | SIMPLEPIE_CONSTRUCT_XHTML ) ) {
+                        return wp_kses_post( $data );
+                } else {
+                        return parent::sanitize( $data, $type, $base );
+                }
+        }
+}

wp-includes/feed.php

@@ -525 +525 @@
  */
 function fetch_feed($url) {
         require_once (ABSPATH . WPINC . '/class-feed.php');
+        require_once (ABSPATH . WPINC . '/class-simplepie-kses.php');
 
         $feed = new SimplePie();
 
+        $feed->set_sanitize_class( 'WP_SimplePie_Sanitize_KSES' );
+        $feed->sanitize = new WP_SimplePie_Sanitize_KSES();
         $feed->set_cache_class( 'WP_Feed_Cache' );
         $feed->set_file_class( 'WP_SimplePie_File' );